diff --git a/roles/kubernetes-apps/csi_driver/cinder/defaults/main.yml b/roles/kubernetes-apps/csi_driver/cinder/defaults/main.yml index c703eae6020ee52ec3a83a01af1e997caf3f0330..9aa039339dcd8433f2bc360dbe89281f775a11b2 100644 --- a/roles/kubernetes-apps/csi_driver/cinder/defaults/main.yml +++ b/roles/kubernetes-apps/csi_driver/cinder/defaults/main.yml @@ -2,15 +2,16 @@ # To access Cinder, the CSI controller will need credentials to access # openstack apis. Per default this values will be # read from the environment. -cinder_auth_url: "{{ lookup('env','OS_AUTH_URL') }}" -cinder_username: "{{ lookup('env','OS_USERNAME') }}" -cinder_password: "{{ lookup('env','OS_PASSWORD') }}" -cinder_region: "{{ lookup('env','OS_REGION_NAME') }}" -cinder_tenant_id: "{{ lookup('env','OS_TENANT_ID')| default(lookup('env','OS_PROJECT_ID')|default(lookup('env','OS_PROJECT_NAME'),true),true) }}" -cinder_tenant_name: "{{ lookup('env','OS_TENANT_NAME') }}" +cinder_auth_url: "{{ lookup('env','OS_AUTH_URL') }}" +cinder_username: "{{ lookup('env','OS_USERNAME') }}" +cinder_password: "{{ lookup('env','OS_PASSWORD') }}" +cinder_region: "{{ lookup('env','OS_REGION_NAME') }}" +cinder_tenant_id: "{{ lookup('env','OS_TENANT_ID')| default(lookup('env','OS_PROJECT_ID'),true) }}" +cinder_tenant_name: "{{ lookup('env','OS_TENANT_NAME')| default(lookup('env','OS_PROJECT_NAME'),true) }}" cinder_domain_name: "{{ lookup('env','OS_USER_DOMAIN_NAME') }}" cinder_domain_id: "{{ lookup('env','OS_USER_DOMAIN_ID') }}" cinder_cacert: "{{ lookup('env','OS_CACERT') }}" + # For now, only Cinder v3 is supported in Cinder CSI driver cinder_blockstorage_version: "v3" cinder_csi_controller_replicas: 1 \ No newline at end of file diff --git a/roles/kubernetes-apps/csi_driver/cinder/tasks/cinder-credential-check.yml b/roles/kubernetes-apps/csi_driver/cinder/tasks/cinder-credential-check.yml index 8e24c9a026eacdf7c8748c0ace6031acbb5c07b9..2514494909d15c8db4f60585064f83fc08dac35b 100644 --- a/roles/kubernetes-apps/csi_driver/cinder/tasks/cinder-credential-check.yml +++ b/roles/kubernetes-apps/csi_driver/cinder/tasks/cinder-credential-check.yml @@ -21,14 +21,14 @@ - name: Cinder CSI Driver | check cinder_tenant_id value fail: - msg: "one of cinder_tenant_id or cinder_trust_id must be specified" + msg: "one of cinder_tenant_id or cinder_tenant_name must be specified" when: - cinder_tenant_id is not defined or not cinder_tenant_id - - cinder_trust_id is not defined + - cinder_tenant_name is not defined -- name: Cinder CSI Driver | check cinder_trust_id value +- name: Cinder CSI Driver | check cinder_tenant_name value fail: - msg: "one of cinder_tenant_id or cinder_trust_id must be specified" + msg: "one of cinder_tenant_id or cinder_tenant_name must be specified" when: - - cinder_trust_id is not defined or not cinder_trust_id + - cinder_tenant_name is not defined or not cinder_tenant_name - cinder_tenant_id is not defined diff --git a/roles/kubernetes-apps/csi_driver/cinder/templates/cinder-csi-cloud-config.j2 b/roles/kubernetes-apps/csi_driver/cinder/templates/cinder-csi-cloud-config.j2 index c68a1085feaa5b0a0027c9d1e0f931ee22392768..d7db274a67df509390a6895017f081a51de40ec3 100644 --- a/roles/kubernetes-apps/csi_driver/cinder/templates/cinder-csi-cloud-config.j2 +++ b/roles/kubernetes-apps/csi_driver/cinder/templates/cinder-csi-cloud-config.j2 @@ -3,9 +3,7 @@ auth-url="{{ cinder_auth_url }}" username="{{ cinder_username }}" password="{{ cinder_password }}" region="{{ cinder_region }}" -{% if cinder_trust_id is defined and cinder_trust_id != "" %} -trust-id="{{ cinder_trust_id }}" -{% else %} +{% if cinder_tenant_id is defined and cinder_tenant_id != "" %} tenant-id="{{ cinder_tenant_id }}" {% endif %} {% if cinder_tenant_name is defined and cinder_tenant_name != "" %} diff --git a/roles/kubernetes-apps/csi_driver/cinder/templates/cinder-csi-controllerplugin.yml.j2 b/roles/kubernetes-apps/csi_driver/cinder/templates/cinder-csi-controllerplugin.yml.j2 index 58c4481659938bcbe65ef74e78adb47d3da6522f..fc4b8ef3e2ca0af96ac55f1c28661dd798965657 100644 --- a/roles/kubernetes-apps/csi_driver/cinder/templates/cinder-csi-controllerplugin.yml.j2 +++ b/roles/kubernetes-apps/csi_driver/cinder/templates/cinder-csi-controllerplugin.yml.j2 @@ -90,7 +90,7 @@ spec: - name: secret-cinderplugin mountPath: /etc/config readOnly: true -{% if cinder_cacert is defined %} +{% if cinder_cacert is defined and cinder_cacert != "" %} - name: cinder-cacert mountPath: {{ kube_config_dir }}/cinder-cacert.pem readOnly: true @@ -101,7 +101,7 @@ spec: - name: secret-cinderplugin secret: secretName: cloud-config -{% if cinder_cacert is defined %} +{% if cinder_cacert is defined and cinder_cacert != "" %} - name: cinder-cacert hostPath: path: {{ kube_config_dir }}/cinder-cacert.pem